Re: [ogpx] Protocol for permitting policy decisions

[Carlo Wood <[e-mail]>]

On Mon, Oct 05, 2009 at 09:32:34AM -0700, Meadhbh Siobhan wrote:
> again, this is a matter of policy, not a matter of protocol.
> 
> let me give you a counter example. [...snip...]

> so the answer to the question of "what does the protocol have to do?"
> is that it only has to convey information about the identity of the
> agent domain to the region provider. it also has to have a mechanism
> for the agent domain to identify the region.
> 
> but the protocol itself does not impose restrictions as to the
> identity of either party. that is a policy issue.

Correct me if I'm wrong, but you are saying that every AD needs
to add a configuration for each region that is serves to know
what to do when a given user wants to TP to that region?

And the protocol does not provide a way for the RD to change that
configuration.

That sounds like a can of worms in terms of administration horrors.
It's not flexible at all, it would make it very labour intensive
to add a new AD to some RD, or for an RD to switch to a different
AD. 'Trust' wouldn't be enough anymore.

Imho, we MUST PUT THE MEANS OF (RE)CONFIGURATION OF REGION DOMAIN
POLICIES IN THE HANDS OF THE REGION DOMAIN! Let them change it
daily, and immediately, if they wish.

-- 
Carlo Wood <[e-mail]>